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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 01/05/2007 has been entered. 

Claim Rejections - 35 USC § 1 03 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 1-6, 8-23, 25-40 and 42-51 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bots et al. U.S. Patent Number: 6,226,748 Bl (hereinafter referred to as 
"Bots") and further in view of Pandya et al. U.S. Patent Number: 6,671,724 Bl (hereinafter 
referred to as "Pandya".) 

4. Referring to claims 1, 18, 35, Bots teaches a group management system comprising: a 
plurality of interconnected nodes [see figure 2 - elements 201-203, 211-213, 221-223, 331-332] 
communicatively coupled with each other as member nodes of a virtual private network ("VPN") 
[see figure 2 - element 'VPNU' and column 2 - lines 36-67 and column 3, lines 1-7] wherein all 
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communications between said interconnected nodes are encrypted [see column 2, lines 55-62, to 
insure secure data communication between members of the same VPN group, when packets are 
to be sent between member of the group, encryption and authentication are used]; and a plurality 
of master nodes, different from the plurality of interconnected nodes [see figure 2 - element 
'VPNU'], each of the master nodes controlling membership in the VPN for an associated non- 
empty subset of the member nodes [see column 3 - lines 8-22] and further facilitating said 
communications between said plurality of interconnected nodes [see column 6 - lines 37-52.] 
Bots does not set forth the limitation of wherein in the event one of the master nodes fails, the 
associated subset of member nodes will be automatically reassigned to one or more other of the 
master nodes however, Pandya teaches this limitation [see Pandya column 7, lines 11-57, 'one 
or more back up control points that will assume primary control'] in order to avoid catastrophic 
network failure. 

One of ordinary skill in the art at the time of applicant's invention would have clearly 
recognized that it is quite advantageous for the system of Bots to have a backup master node that 
will assume control in an event of primary master node's failure, in order to avoid catastrophic 
network failure. It is for this reason that one of ordinary skill in the art would have been 
motivated to implement Bots 's system with a backup master node in order to avoid catastrophic 
network failure. 

5. Referring to claims 2, 19, 36, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein a membership change in at least one of the subsets can be 
performed without notifying all of the master nodes not associated with the changed subset [see 
Bots column 2 - lines 36-67 and column 3, lines 1-7.] 
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6. Referring to claims 3,20, 37, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein at least two of the subsets do not share any member nodes in 
common [see Bots figure 2 - elements 201-203, 211-213, 221-223, 331-332.] 

7. Referring to claims 4, 21, 38, teachings of Bots as modified by the teachings of Pandya 
above, teaches a group management system however fails to set forth the limitation of the system 
wherein at least two of the subsets share at least one member node in common. Pandya teaches 
the above stated limitations [see column 7 - lines 3-39; column 6 - lines 39-59.] One of ordinary 
skill in the art at the time of applicant's invention would have clearly recognized that it is quite 
advantageous for the system of Bots to have at least two of subsets share at least one member 
node in common in order to provide an alternate routing path. It is for this reason that one or 
ordinary skill in the art would have been motivated to implement Bots 's system with at least two 
of subsets share at least one member node in common in order to provide an alternate routing 
path. 

8. Referring to claims 5, 22, 39, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein a communication involving said common member node can 
be transmitted along multiple paths [see Pandya column 7 - lines 3-39; column 6 - lines 39-59.] 

9. Referring to claims 6, 23, 40, Bots teaches the system further comprising an intrusion 
detection mechanism that receives said multiple-path communication as input [see Pandya 
column 7 - lines 3-39; column 6 - lines 39-59.] 

10. Referring to claims 8, 25, 42, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein each of the member nodes is associated with at least one of 
the master nodes as a back-up master [see column 7 - lines 3-39; column 6 - lines 39-59.] 
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1 1 . Referring to claims 9, 26, 43, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein the plurality of interconnected nodes are communicatively 
coupled as part of a peer-to-peer network [see Pandya column 6 - lines 26-35; column 10 - lines 
12-15.] 

12. Referring to claims 10, 27, 44, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein the plurality of master nodes are part of an edge-based 
content delivery network [see Pandya column 6 - lines 26-35.] 

13. Referring to claims 11, 28, 45, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein the member nodes are allocated to the subsets at least partly 
based upon one or more criteria of connectivity between each of the member nodes and the 
corresponding master nodes [see Pandya column 4 - lines 22-46; column 6 - lines 26-35.] 

14. Referring to claims 12, 29, 46, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein the connectivity criteria are selected from a group of criteria 
comprising geographical distance, topological distance, bandwidth, latency, jitter, financial cost, 
and political boundaries [see Pandya column 8 - lines 47-67; column 9 - lines 1-13.] 

15. Referring to claims 13, 30, 47, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system wherein at least one of the master nodes further controls membership 
in another virtual overlay group different from the VPN [see Pandya column 7 - lines 3-39; 
column 6 - lines 39-59.] 

16. Referring to claims 14, 31, 48, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system of wherein an encryption key is used for communication [see Pandya 
column 9 - lines 50-65; column 10 - lines 52-65] however, does not set forth the limitation of 
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the system of wherein a communication from a first one of the subsets of the member nodes uses 
a first encryption key, and a communication from a second one of the subsets uses a second 
encryption key that is different from the first encryption key. It would have been obvious to one 
of ordinary skill in the art at the time of applicant's invention that it was old and well known in 
the computer networking art to get the advantage of secure data transmission by providing each 
unit/subset with it's own encryption key. It would have been obvious to one or ordinary skill in 
the art at the time of applicant's invention to use two separate encryption keys for both of the 
subsets, to get this advantage. 

17. Referring to claims 15, 32, 49, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system of wherein an encryption key is used for communication [see Pandya 
column 9 - lines 50-65; column 10 - lines 52-65] however, does not set forth the limitation of 
the system wherein one or more of the master nodes are operable to translate between the 
encryption keys. It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention that it was old and well known in the computer networking art to get the 
advantage of allowing devices connected to two different subsets to communicate with each 
other by providing a master node with an encryption key translator. It would have been obvious 
to one or ordinary skill in the art at the time of applicant's invention to use encryption key 
translator to get this advantage. 

18. Referring to claims 16, 33, 50, teachings of Bots as modified by the teachings of Pandya 
above, teaches the system of wherein an encryption key is used for communication [see Pandya 
column 9 - lines 50-65; column 10 - lines 52-65] however, does not set forth the limitation of 
the system wherein a communication from a first one of the subsets of the member nodes and a 
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communication from a second one of the subsets of the member nodes both use the same 
encryption key. It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention that it was old and well known in the computer networking art to get the 
advantage of saving resources by using same encryption key to communicate with a device that 
is being shared between two different subsets of the member nodes. It would have been obvious 
to one or ordinary skill in the art at the time of applicant's invention to use same encryption key 
to get this advantage. 

19. Referring to claims 17, 34, 51, teachings of Bots as modified by. the teachings of Pandya 
above, teaches the system wherein at least one of the master nodes are operable to remotely 
install software communication mechanisms for a new member node of the VPN without the 
necessity of installing augmented hardware for the new member node [see Pandya column 4 - 
lines 30-61; column 6 - lines 60-67; column 7 - lines 1-10.] 

Response to Arguments 

20. Applicant's arguments filed 01/05/2007 have been fully considered but they are not 
persuasive. The applicant argues that the Bots reference does not teach the limitation of 
facilitating VPN communications between the member nodes, and in which all communications 
between the member nodes are encrypted. At most, Bots teaches a security device (i.e., a VPN 
unit or VPNU) that performs encryption or decryption on intercepted communications en-route 
between member nodes of VPNs. That is, as described by the cited passage of Bots (i.e., column 
6, lines 37-52), the VPNU associated with a sender "will process the data packet from the 
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sending side in such as way as to ensure that it [is] encrypted, authenticated and optionally 
compressed" (emphasis added) [see pages 10-14 of the REMARKS section.] 

The examiner respectfully disagrees with this argument. Bots teaches the limitation of 
wherein all communications between said interconnected nodes are encrypted [see column 2, 
lines 55-62, to insure secure data communication between members of the same VPN group, 
when packets are to be sent between member of the group, encryption and authentication are 
used.] 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Niketa I. Patel whose telephone number is (571) 272 4156. The 
examiner can normally be reached on M-F 8:00 A.M. to 5:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Donald Sparks can be reached on (571) 272 4201 . The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. 

Status information for published applications may be obtained from either Private PAIR 
or Public PAIR. Status information for unpublished applications is available through Private 
PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business Center 
(EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786-9199 (IN USA OR 
CANADA) or 571-272-1000. 
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Niketa Patel 
03/28/2007 



